CVE-2020-26157
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing. This leads to remote code execution because of Node integration.
Published: 2020-09-30 · CVSS: Unscored
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing. This leads to remote code execution because of Node integration.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7